Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:47052
HistoryMay 20, 2024 - 7:51 a.m.

Security Bypass

2024-05-2007:51:14
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
datadog/dd-trace
security bypass
open_basedir

7 High

AI Score

Confidence

Low

datadog/dd-trace is vulnerable to Security Bypass. The vulnerability is due to insufficient constraint on the ddtrace.request_init_hook by the open_basedir INI directive, which allows an attacker to bypass the open_basedir INI directive.

7 High

AI Score

Confidence

Low